cleantalk
Vulnerabilities and Security Researches

CM WordPress Search And Replace Plugin, CVE-2025-54728

CVE, Research URL

CVE-2025-54728

Published on
Aug 15, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace allows Cross Site Request Forgery. This issue affects CM On Demand Search And Replace: from n/a through 1.5.2.
Affected versions
Min -, max 1.5.3.
Status
vulnerable